Windows Analysis Report
excel_to_csv.exe

Compliance

Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\README.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\LICENSE.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron\resources\xsl\iso-schematron-xslt1\readme.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts\pdfcorefonts\readme.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\sample_data\README.txt

Source: excel_to_csv.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Spreading

Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_exampleip.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_combo.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\README.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_example.txt

System Summary

Source: C:\Users\user\Desktop\excel_to_csv.exe

Process Stats: CPU usage > 98%

Source: C:\Users\user\Desktop\excel_to_csv.exe

File read: C:\Users\user\Desktop\excel_to_csv.exe

Source: excel_to_csv.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\excel_to_csv.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Source: unknown	Process created: C:\Users\user\Desktop\excel_to_csv.exe C:\Users\user\Desktop\excel_to_csv.exe
Source: C:\Users\user\Desktop\excel_to_csv.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\Desktop\excel_to_csv.exe	Process created: C:\Users\user\Desktop\excel_to_csv.exe C:\Users\user\Desktop\excel_to_csv.exe
Source: C:\Users\user\Desktop\excel_to_csv.exe	Process created: C:\Users\user\Desktop\excel_to_csv.exe C:\Users\user\Desktop\excel_to_csv.exe

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6720:120:WilError_02
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6720:304:WilStaging_02

Source: C:\Users\user\Desktop\excel_to_csv.exe

File created: C:\Users\user\AppData\Local\Temp\_MEI37162

Source: classification engine

Classification label: clean3.winEXE@4/2051@0/0

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: excel_to_csv.exe

Static file information: File size 83099953 > 1048576

Source: excel_to_csv.exe

Static PE information: Image base 0x140000000 > 0x60000000

Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IMPORT
Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_RESOURCE
Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_BASERELOC
Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG
Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG
Source: excel_to_csv.exe	Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_IAT

Source: excel_to_csv.exe

Static PE information: HIGH_ENTROPY_VA, DYNAMIC_BASE, NX_COMPAT, TERMINAL_SERVER_AWARE

Source: excel_to_csv.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: excel_to_csv.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IMPORT is in: .rdata
Source: excel_to_csv.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_RESOURCE is in: .rsrc
Source: excel_to_csv.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_BASERELOC is in: .reloc
Source: excel_to_csv.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG is in: .rdata
Source: excel_to_csv.exe	Static PE information: Data directory: IMAGE_DIRECTORY_ENTRY_IAT is in: .rdata

Data Obfuscation

Source: excel_to_csv.exe

Static PE information: section name: _RDATA

Persistence and Installation Behavior

Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\ckdtree.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_queue.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\ft2font.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libffi-7.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\liblbfgsb.HQ462J2S775YLZ6OYJPNA7SNCTWTY6AB.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\qhull.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32com\shell\shell.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\_elementpath.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ellip_harm_2.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libslsqp_op.RGGN6ZOFD2K47X7YRNDYCM7JFP4AGLER.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\msvcp140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\cryptography\hazmat\bindings\_openssl.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libbispeu.7AH3PCQ2E2NGLC3AQD7FFAH73KGJTZCJ.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\constants.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_lzma.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_overlapped.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdqag.T72IVSWBZWMEWPRL5GUSWXG7YX5SIDL7.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\coverage\tracer.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libopenblas.JPIJNSWNNAN3CE6LLI5FWSPHUT2VXMTH.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\bit_generator.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\_umath_linalg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_asyncio.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_path.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_version.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_poll.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\builder.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_socket.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_sfc64.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_uuid.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\html\diff.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\markupsafe\_speedups.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\tk86t.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\mtrand.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\select.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\socket.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_device.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libssl-1_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\backends\_backend_agg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libvode-f2p.Z7T4MYZRC7MVAUK7R5P6DZADGJ7D4QHD.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_cffi_backend.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libblkdta00.Z3GYF4GUBRAGBA7HTIDJSL6GHRNSZC4A.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libwrap_dum.QD25TO26BDFHQJ5N4TUPA4PKC25WONPQ.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\utils.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libbanded5x.UC7I2QORE7WXBZMGM667KLMAZ5BHRGMF.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\cython_special.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32api.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\etree.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\tcl86t.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_tri.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdfitpack.VPRJUWUEP6U577QBCGTTCCFXB3222T4I.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\specfun.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\sqlite3.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_hashlib.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libcrypto-1_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_bounded_integers.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\vcruntime140_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\groupby.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\message.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ufuncs.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\mvn.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libd_odr.T6HJADSG7NXVV53PGDPMBVBPNAY5DCRV.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_qhull.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_multiprocessing.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libansari.R6EA3HQP5KZ6TAXU4Y4ZVTRPT7UVA53Z.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_webp.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft\_pocketfft_internal.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32pdh.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\unicodedata.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_common.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32security.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\_voronoi.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_proxy_steerable.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_tkinter.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_image.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libmvndst.RDHNECQ4LTGAG44TTDYZZ5ZBHXLFUU6E.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_decimal.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\VCRUNTIME140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_contour.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imagingtk.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_ttconv.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_bz2.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\mfc140u.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_pcg64.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_blas_su.ZGZGBHY3USY2DZYMC6A7FXFYWQOXEGEU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libgetbreak.WITV2EKEUBR7JIJUE2V7RRCPJZ5HFUMD.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\concrt140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_sqlite3.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\sax.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_arpack-.OK6465BFOHXDMFH3NXOHUTABLFW6ORTH.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libwrap_dum.QAR7EKHNJKPFYLLEUOEPIWK73NUFV4MM.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\error.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imaging.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32ui.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\nacl\_sodium.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\liblsoda-f2.SX63BSUSJ2W6PMO4GUM2XUWOUIYAX6DX.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_comb.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libspecfun.LQCTHMCYNULEOOGKIO6AGREE6D6V37RU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdfft.54FN2NU3IPRPWIXGON3RLYGAIEEWI5VO.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdgamln.VG5XMDWZQXSTTZOVZ75VSDGH36PAWPBA.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imagingft.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libopenblas.3HBPCJB5BPQGKWVZAVEBXNNJ2Q2G3TUP.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_ctypes.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_test_fo.JF5HTWMUPBXWGAYEBVEJU3OZAHTSVKCT.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\kiwisolver.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32evtlog.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\_stats.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_dop-f2p.3HWIZKD75YUXVW7GYVDBE4FCDUO4NUKG.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_tests.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\bcrypt\_bcrypt.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libcobyla2.25EVUSEBAW7VKISARB7LO3UGZPN2HXE3.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_mt19937.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\context.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\tornado\speedups.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\transform\rotation.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32clipboard.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_elementtree.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libzmq-v141-mt-4_3_4-97a8c0cb.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\objectify.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_ssl.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\backends\_tkagg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libnnls.4HUTGAJQTI623WTX372VAIIWXRLC62YU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_philox.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ufuncs_cxx.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\_win32sysloader.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdet.XIXUHWWL4FUSEATVU7X7BEVLZ7QPNYXT.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libchkder.G7WSOGIYYQO3UWFVEZ3PPXCXR53ADVPA.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libsodium-3b4bc14f.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\statlib.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\html\clean.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_umath.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\algos.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\libdcsrch.I2AOPDCXAPDRFNPWY55H5UE7XZSU5CVN.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_generator.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\lapack_lite.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\win32trace.pyd			Jump to dropped file

Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\README.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\LICENSE.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron\resources\xsl\iso-schematron-xslt1\readme.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts\pdfcorefonts\readme.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File created: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\sample_data\README.txt

Malware Analysis System Evasion

Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\ckdtree.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_queue.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\ft2font.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libffi-7.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\liblbfgsb.HQ462J2S775YLZ6OYJPNA7SNCTWTY6AB.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\qhull.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32com\shell\shell.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\_elementpath.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ellip_harm_2.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libslsqp_op.RGGN6ZOFD2K47X7YRNDYCM7JFP4AGLER.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\msvcp140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\cryptography\hazmat\bindings\_openssl.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libbispeu.7AH3PCQ2E2NGLC3AQD7FFAH73KGJTZCJ.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_overlapped.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_lzma.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\constants.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdqag.T72IVSWBZWMEWPRL5GUSWXG7YX5SIDL7.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libopenblas.JPIJNSWNNAN3CE6LLI5FWSPHUT2VXMTH.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\coverage\tracer.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\bit_generator.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\_umath_linalg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_asyncio.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_path.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_version.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_poll.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\builder.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_sfc64.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_socket.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_uuid.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\html\diff.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\markupsafe\_speedups.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\tk86t.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\mtrand.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\select.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_device.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\socket.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libssl-1_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\backends\_backend_agg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libvode-f2p.Z7T4MYZRC7MVAUK7R5P6DZADGJ7D4QHD.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libblkdta00.Z3GYF4GUBRAGBA7HTIDJSL6GHRNSZC4A.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_cffi_backend.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libwrap_dum.QD25TO26BDFHQJ5N4TUPA4PKC25WONPQ.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\utils.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libbanded5x.UC7I2QORE7WXBZMGM667KLMAZ5BHRGMF.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\cython_special.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32api.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\etree.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\tcl86t.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_tri.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdfitpack.VPRJUWUEP6U577QBCGTTCCFXB3222T4I.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\specfun.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_hashlib.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\sqlite3.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libcrypto-1_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_bounded_integers.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\vcruntime140_1.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\groupby.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\message.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ufuncs.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\mvn.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libd_odr.T6HJADSG7NXVV53PGDPMBVBPNAY5DCRV.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_qhull.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_multiprocessing.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libansari.R6EA3HQP5KZ6TAXU4Y4ZVTRPT7UVA53Z.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_webp.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft\_pocketfft_internal.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32pdh.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\unicodedata.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_common.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32security.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\_voronoi.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\_proxy_steerable.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_tkinter.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_image.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libmvndst.RDHNECQ4LTGAG44TTDYZZ5ZBHXLFUU6E.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_decimal.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\VCRUNTIME140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_contour.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imagingtk.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\_ttconv.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_bz2.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\mfc140u.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_pcg64.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libgetbreak.WITV2EKEUBR7JIJUE2V7RRCPJZ5HFUMD.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_blas_su.ZGZGBHY3USY2DZYMC6A7FXFYWQOXEGEU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\concrt140.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_sqlite3.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\sax.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_arpack-.OK6465BFOHXDMFH3NXOHUTABLFW6ORTH.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libwrap_dum.QAR7EKHNJKPFYLLEUOEPIWK73NUFV4MM.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\error.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imaging.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32ui.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\nacl\_sodium.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\liblsoda-f2.SX63BSUSJ2W6PMO4GUM2XUWOUIYAX6DX.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_comb.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libspecfun.LQCTHMCYNULEOOGKIO6AGREE6D6V37RU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdfft.54FN2NU3IPRPWIXGON3RLYGAIEEWI5VO.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdgamln.VG5XMDWZQXSTTZOVZ75VSDGH36PAWPBA.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL\_imagingft.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libopenblas.3HBPCJB5BPQGKWVZAVEBXNNJ2Q2G3TUP.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_ctypes.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_test_fo.JF5HTWMUPBXWGAYEBVEJU3OZAHTSVKCT.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\kiwisolver.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32evtlog.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\_stats.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lib_dop-f2p.3HWIZKD75YUXVW7GYVDBE4FCDUO4NUKG.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_tests.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\bcrypt\_bcrypt.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libcobyla2.25EVUSEBAW7VKISARB7LO3UGZPN2HXE3.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_mt19937.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython\context.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\tornado\speedups.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial\transform\rotation.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32clipboard.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_elementtree.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libzmq-v141-mt-4_3_4-97a8c0cb.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\objectify.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_ssl.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\backends\_tkagg.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libnnls.4HUTGAJQTI623WTX372VAIIWXRLC62YU.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_philox.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special\_ufuncs_cxx.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdet.XIXUHWWL4FUSEATVU7X7BEVLZ7QPNYXT.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\_win32sysloader.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libchkder.G7WSOGIYYQO3UWFVEZ3PPXCXR53ADVPA.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libsodium-3b4bc14f.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\html\clean.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats\statlib.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_umath.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\algos.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\libdcsrch.I2AOPDCXAPDRFNPWY55H5UE7XZSU5CVN.gfortran-win_amd64.dll			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_generator.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\lapack_lite.cp39-win_amd64.pyd			Jump to dropped file
Source: C:\Users\user\Desktop\excel_to_csv.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\_MEI37162\win32trace.pyd			Jump to dropped file

Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_exampleip.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_combo.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\README.txt
Source: C:\Users\user\Desktop\excel_to_csv.exe	File opened: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin\test_example.txt

HIPS / PFW / Operating System Protection Evasion

Source: C:\Users\user\Desktop\excel_to_csv.exe

Process created: C:\Users\user\Desktop\excel_to_csv.exe C:\Users\user\Desktop\excel_to_csv.exe

Language, Device and Operating System Detection

Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\PIL VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\html VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\backends VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\tslibs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\_libs\window VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\_lib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\integrate VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\interpolate VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\ndimage VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\optimize VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\optimize\_highs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\sparse VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\sparse\csgraph VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\sparse\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\spatial VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\special VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\scipy\stats VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\zmq\backend\cython VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\core\tests VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\extensions VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\extensions\__pycache__ VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\extensions\tests VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\extensions\tests\__pycache__ VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\IPython\testing\plugin VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\altgraph-0.17.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\cryptography-3.3.2.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\apps VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\conf VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\conf\urls VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\admin VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\admin\templatetags VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\admin\views VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\admindocs VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\auth VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\auth\handlers VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\auth\management VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\auth\management\commands VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\contenttypes VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\contenttypes\management VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\contenttypes\management\commands VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\flatpages VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\django-stubs\django-stubs\contrib\flatpages\templatetags VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3\werkzeug VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3\werkzeug\contrib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3\werkzeug\debug VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3\werkzeug\middleware VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\2and3\yaml VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\docutils VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\docutils\parsers VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\docutils\parsers\rst VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\jwt VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\jwt\contrib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\jwt\contrib\algorithms VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\pkg_resources VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\six VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\six\moves VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\six\moves\urllib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\jedi\third_party\typeshed\third_party\3\typed_ast VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron\resources VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron\resources\xsl VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\lxml\isoschematron\resources\xsl\iso-schematron-xslt1 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts\afm VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts\pdfcorefonts VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\fonts\ttf VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\images VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\sample_data VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\matplotlib\mpl-data\stylelib VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pandas\io VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\parso VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\parso\python VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pyinstaller-4.5.1.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pytz VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pytz\zoneinfo VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pytz\zoneinfo\Africa VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_ctypes.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_socket.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\select.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pywintypes39.dll VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_bz2.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_lzma.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pyexpat.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\win32api.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pythoncom39.dll VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\win32com VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\win32com VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\win32com VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\base_library.zip VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\setuptools-41.6.0.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pyinstaller-4.5.1.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\cryptography-3.3.2.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\altgraph-0.17.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\setuptools-41.6.0.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\pyinstaller-4.5.1.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\cryptography-3.3.2.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\altgraph-0.17.dist-info VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\94scgqrg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\tmp61gj493f VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\tcl VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\tk VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_ssl.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_umath.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\core\_multiarray_tests.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\lapack_lite.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\linalg\_umath_linalg.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\fft\_pocketfft_internal.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\mtrand.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\bit_generator.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_common.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162 VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\_hashlib.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\Desktop\excel_to_csv.exe VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random\_bounded_integers.cp39-win_amd64.pyd VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\numpy\random VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\tk VolumeInformation
Source: C:\Users\user\Desktop\excel_to_csv.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\_MEI37162\tk\ttk VolumeInformation

Source: C:\Users\user\Desktop\excel_to_csv.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid